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listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Currently Amended) A method of authenticating an action performed at a 
control point by a user involving a token which is issued to the user and which is involved with 
the user performing the action, said token being connectable to a network having a token issuer 
accessing a database of issued tokens and a control point operator accessing a database of 
approved control points, said network forming a first communication pathway, said method 
comprising: 

obtaining information from said control point by said toke n via a second communication 
paihvvay ; 

transmitting via said first communication pathway through said network from said token 
said information obtained by- from said control point and information regarding said token, said 
information being transmitted to said network from said token; 

receiving at said token via said first communication pathway an authentication of said 
control point and an authentication of said token; 

transmitting to said control point said authentication of said toke n via said second 
com m unicati on path way , 

wherein the token is a mobile wireless communication device. 

2. Cancelled. 

3. Cancelled. 

4. (Currently Amended) The method of claim 1, wherein said mobile 
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communication device communicates with said toke n a token issuer using a wireless 
communication path in at least part of said first communication pathway . 

5. Cancelled. 

6. (Currently Amended) The method of claim 1, fa rt h er co mprising wherein said 
control point authorizing said action based on authentication of said token^~and^^ 

said cont rol point provided by-said token. 

7. (Original) The method of claim 1, wherein said action comprises a financial 
transaction. 

8. (Currently Amended) The method of claim 1, wherein said authenticating 
comprises access control to a p hysical l ocation b eyond said control point d oor . 

9. (Previously presented) The method of claim 1, wherein said authenticating 
said control point comprises notifying said user whether said control point has authorization for 
said action. 

10. (Withdrawn) A method of authenticating a control point involving an action 
performed by the control point by a user involving a token which is issued to the user of the 
token and which is involved with the user performing the action, said control point connectable 
to a network having a control point operator accessing a database of approved control points, 
said method comprising: 

obtaining information regarding said control point; 

transmitting said obtained information regarding said control point and information 
regarding said token to said network via said control point; 

via said control point, receiving at said token authentication information of said control 
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point, said authentication information relating to said database of approved control points and 
having been received from said network connectable to said control point, the token 
authenticating said control point based on said received authentication information, 

wherein said control point authenticates the user to the control point to perform the 
action using the control point based on information received from said network and 

wherein the token is a mobile communication device. 

11. (Withdrawn) The method of claim 10, wherein said information regarding said 
token is transmitted to said control point by physically presenting said token. 

12. (Cancelled). 

13. (Cancelled). 

14. (Withdrawn) The method of claim 10, wherein said mobile communication 
device communicates with said control point using a wireless communication path. 

15. (Withdrawn) The method of claim 10, wherein said token communicates with 
said token issuer using said network of said control point. 

16. (Withdrawn) The method of claim 10, further comprising said control point 
authorizing an action based on information provided by said token. 

17. (Withdrawn) The method of claim 16, wherein said action comprises a financial 
transaction. 

18. (Withdrawn) The method of claim 16, wherein said action comprises access 
control to a location beyond a physical location of said control point. 

19. (Withdrawn) The method of claim 10, wherein said method further comprises 
the step of: 
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notifying said user whether said control point has authorization for said action. 
20-22. Cancelled. 

23. (Currently Amended) A device for authenticating a control point involving an 
action performed by the control point by a user involving the device which is issued to the user 
and which is involved with the user performing the action , said device comprising: 

a wireless communication portion that obtains information via a first communication path 
regarding said control point and communicates wirelessly via a second communication path with 
an external entity to authenticate said control point based on said information and to authenticate 
the user to the control point to perform the action using the control point, said wireless 
communication portion configured to transmit via said first communication path authentication 
of said device to the control point after having been received from said- networ k via said second 
co m muni c at i o n pa th ; and 

a user interface portion, coupled to said communication portion, to indicate a result of 
said authentication of the control point to a user, 

wherein the device is a mobile communication device and said communication 
authenticating said control point and said user device is received from over said network. 

24. (Cancelled). 

25. (Cancelled). 

26. Cancelled. 

27. (Previously presented) The device of claim 23, wherein said action 
comprises a financial transaction. fc 

28. (Previously presented) The device of claim 23, wherein said action 
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comprises access control. 

29. (Previously presented) The device of claim 23, wherein said user interface 
portion notifies said user whether said control point has authorization for said action. 

30. (Previously presented) The device of claim 23, wherein said user interface 
portion comprises a display device. 

31. (Previously presented) The device of claim 23, further comprising a card 
that connects with said communication portion, said card containing information regarding one 
of said device and said user. 

32. (Previously presented) The device of claim 23, wherein said 
communication portion is temporarily coupled to said device. 

33. (Withdrawn) A method of obtaining physical access to a location beyond a 
physical location of a control point, said method comprising the steps of: 

exchanging information between a control point and a token; 

transmitting at least part of said exchanged information that includes information about 
said control point to an entity trusted by said token; 

receiving from said network authentication of said control point; 
obtaining access to said physical location beyond said control point. 

34. (Withdrawn) The method according to claim 33, wherein said token receives 
authentication of said control point from said control point. 

35. (Withdrawn) The method according to claim 33, wherein said control point 
receives authentication of said token from said token. 

36. (New) The method of claim 1 , said action including collecting a toll. 
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37. (New) The device of claim 23, wherein said action includes collecting a toll. 
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